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What is claimed is: 



CLAIMS 




A digital signature cryptographic method comprising: 
supplying a set S 1 of k polynomial functions as a public-key, the set 
SI including the Junctions P,(x,,...,x n+V , yi,...,y k ),..., P k (x l3 ...,x n+V , yi,...,y k ), 
where k, v, and n are integers, x 1? ...,x n+v are n+v variables of a first type, yi,...,y k 
are k variables of a second type, and the set SI is obtained by applying a secret 
key operation q>n a set S2 of k polynomial functions 
P' 1 (a,,...,a n+v ,y !) ...,y k i...,P' k (ai,...,a n+v ,y 1 ,...,y k ) where a,,...,a n+v are n+v variables 
which include a set ob n "oil" variables a l9 ...,a n , and a set of v "vinegar" variables 

^n+I?---?^n+v? 

providing a message to be signed; 

applying) a hash function on the message to produce a series of k 
values b ],..., b k ; 

substituting the series of k values b|,...,b k for the variables yi,.. .,y k 
of the set S2 respectively to produce a set S3 of k polynomial functions 
P" i(ai,...,a n+v ),. . P'\(4i,...,an+v); 

selecting fv values a' n+1 ,...,a' n+v for the v "vinegar" variables 

solving a| set of equations P",(a 1 ,...,a n ,a' n+I ,...,a J n+v )=0,..., 
P" k (ai,...,a n ,a' n+ i,...,a' n+v )tO to obtain a solution for a'i,...,a' n ; and 

applying thp secret key operation to transform a' i,...,a' n+v to a 
digital signature e 1 ,...,e n+v .\ 



2. \ A method ac 

verifying^e digital signatu 



:ording to claim 1 and also comprising the step of 



*e. 
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A method according to claim 2 and wherein said verifying step 
)mprises the steps of: 

obtaining the signature e ls ...,e n+v , the message, the hash function 
and t^e public key; 

applying the hash function on the message to produce the series of 
k values b^,...,b k ; and 

verifying thit the equations P 1 (e 1 ,...,e n+v ,bi,... J b k )=0,..., 
Pk(ei,...,e n +v, b k )=0 are satisfied. 

10 4. A mtethod according to claim 1 and wherein the set S2 comprises 

the set f(a) of k polynomial functions of the HFEV scheme. 
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5. A method ^cc 

the set S of k polynomial fir 



>rding to claim 1 and wherein the set S2 comprises 
ctions of the UOV scheme. 



6. A method acc 

comprises the step of selectih 
than the number n of "oil" vj iriables 



Drdmg to claim 1 and wherein said supplying step 
g thovnumber v of "vinegar" variables to be greater 



q v is greater than 2 32 , where ( 



A method according to claim 1 and wherein v is selected such that 
is the numbekof elements of a finite field K. 



8. A method according to claim l\and wherein said supplying step 

comprises the step of obtair ing the set SI froiri a subset S2' of k polynomial 
functions of the set S2, the subset S2' being characterized by that all coefficients 
of components involving aAy of the yi,...,yk variables in the k polynomial 
functions P^(a!,...,a n+V ,yi,.. Jy k ),...,P^(a 1 ,...,a n+v ,y l ,...,\) are zero, and the 
number v of "vinegar" variables is greater than the number^n of "oil" variables. 
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9. A method according to claim 8 and wherein the set S2 comprises 

the set S of k polynomial functions of the UOV scheme, and the number v of 
"vinegar" variables is selected so as to satisfy one of the following conditions: 

(a) for each cl aracteristic p other than 2 of a field K in an "Oil and 
Vinegar" schene of degree 2, v satisfies the inequality q ( ' * !p n' > 



(bl for p = 2 
greafer than n 
(c) for\ach 
degree 3, v\is 



10. 



the set S of k polynomial 
"vinegar" variables is sele 
>2 40 for a characteristic p 
degree 2. 



in an "Oil and Vinegar" scheme of degree 3, v is 
(1 + sqrt(3)) and lower than or equal to n 3 /6, and 
other than 2 in an "Oil and Vinegar" scheme of 
greater than n and lower than or equal to n 4 . 



A method according to claim 8 and wherein the set S2 comprises 
functions of the UOV scheme, and the number v of 
ted so as re> satisfy the inequalities v<n 2 and q (v n)1 * n 4 
-2 of a fielavK in an "Oil and Vinegar" scheme of 



11. A method 

operation comprises a 

a l>--j a n+v 



ccording to claim 1 and wherein said secret key 
sdcret affine transformation s on the n+v variables 



12. A method ac 

an expression including 
polynomial. 



13. 



:ording to claim 4 and' wherein said set S2 comprises 
k functions that are derived from a univariate 



A method according to claim 12 and wherein said univariate 



polynomial includes a un 
100,000. 



variate polynomial of degree less than or equal to 
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and the public key; 

applying the has 
k values t>i,...,b k ; and 

verifying that 



14. A cryptographic {method for verifying the digital signature of claim 

1, the method comprising: 

obtaining the signature e e n+v , the message, the hash function 



l function on the message to produce the series of 



the equations P|(e|,...,e n+v ,b l5 ...,b k )=0,..., 



P k (e,,...,e n+V , b l? ... 7 b k )=0 are satisfied. 



In an "Oil an 



Vinegar" signature method, an improvement 



comprising the step of using more "vinegar" variables than "oil" variables. 



16. 



method according to claim 15 and wherein the number v of 



"vinegar" variable's selectee 



(a) for e^h chiLracteristic p other than 2 of a field K and for a 



degree 2 of the 
inequality q (v n) " 



method, v is gre 
n 3 /6, and 
(c) for each p 



so as to satisfy one of the following conditions: 



'Oil and Vinegar" signature method, v satisfies the 
n > z , 



(b) for p = 2 and foK a degree 3 of the "Oil and Vinegar" signature 



iter than n*(l + sqrt(3)) and lower than or equal to 



)ther than 2 and for a degree 3 of the "Oil and 



Vinegar" signature method, v is^§reater than n and lower than or 
equal to n 4 . 
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17. \ A method according to claim 15 and wherein the set S2 comprises 
the set S\*f k polynomial functions of the UOV scheme, and the number v of 
'vinegar variables is selected so as to satisfy the inequalities v<n 2 and q (v " nM * n 4 
>2 40 for a characteristic p=2 of a field K in an "Oil and Vinegar' scheme of 
desree 2. 





n 
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